CVE-2009-1533
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office...
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
CVE-2009-1533- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
CVE-2009-1533- Updated
- 2026-11-02
EUVDEUVD-2009-1529 No score
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
EUVD-2009-1529- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8q6-mwvg-c9mq No score
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office...
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
GHSA-h8q6-mwvg-c9mq- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1533 is a high vulnerability (CVSS 9.3) in Microsoft Office, published June 10, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 35.6%, the 98th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2009/1543
secunia.com/advisories/35371
securityfocus.com/bid/35184
osvdb.org/54939
securitytracker.com/id?1022355
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-024
Show 7 moreShow less
us-cert.gov/cas/techalerts/TA09-160A.html
jvn.jp/en/jp/JVN70858401/index.html
blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6292
nvd.nist.gov/vuln/detail/CVE-2009-1533
github.com/advisories/GHSA-h8q6-mwvg-c9mq